And the answer is E But I did remove some functionality from the server side
I'm writhing a doc on it for the deployment team But basicali remove In ossec.conf the services you don’t want doubled up But first I installed the server in /opt/ossec-server Then did same install has agent in /opt/opt/ossec-agent Next started the server Then added the agent using mange agent on the server side Up t'il now no conflicts some tweaking of of the conf file To remove or add functionality But all this is in test mode to see if ossec will meet the Requirements of the Torquemada of this world(corp. security) Good luck Dan -----Message d'origine----- De : [email protected] [mailto:[email protected]] De la part de carlopmart Envoyé : 15 déc. 2010 13:00 À : [email protected] Objet : Re: [ossec-list] Server and agent at the same time on the same host On 12/15/2010 06:44 PM, [email protected] wrote: > > Hi > > Have done exacltely that on 3 Solaris servers one is server and agent > What steps have you followed? I am thinkin on this: a) Install ossec as a server. b) Remove syscheck, rootcheck and localfile params from ossec.conf on the server side. c) Change ossec user's home to a different directories that ossec's install script configure. d) Add server as an agent using manage_agents script. e) Install ossec again but this time as an agent ... Could it work? -- CL Martinez carlopmart {at} gmail {d0t} com Avis de confidentialité : Ce courriel et les pièces qui y sont jointes contiennent de l'information confidentielle et peuvent être protégés par le secret professionnel ou constituer de l’information privilégiée. Ils sont destinés à l'usage exclusif de la (des) personne(s) à qui ils sont adressés. Si vous n'êtes pas le destinataire visé ou la personne chargée de transmettre ce document à son destinataire, vous êtes avisé par la présente que toute divulgation, reproduction, copie, distribution ou autre utilisation de cette information est strictement interdite. Si vous avez reçu ce courriel par erreur, veuillez en aviser immédiatement l’expéditeur par téléphone ainsi que détruire et effacer l'information que vous avez reçue de tout disque dur ou autre média sur lequel elle peut être enregistrée et ne pas en conserver de copie. Merci de votre collaboration. Notice of Confidentiality: This electronic mail message, including any attachments, is confidential and may be privileged and protected by professional secrecy. They are intended for the exclusive use of the addressee. If you are not the intended addressee or the person responsible for delivering this document to the intended addressee, you are hereby advised that any disclosure, reproduction, copy, distribution or other use of this information is strictly forbidden. If you have received this document by mistake, please immediately inform the sender by telephone, destroy and delete the information received from any hard disk or any media on which it may have been registered and do not keep any copy. Thank you for your cooperation.
